1. Purpose of the Role

To provide independent oversight regarding legislative and regulatory compliance in offices and on site and the effectiveness of and adherence to Group internal controls.

2. Key Responsibilities

2.1. Audit Planning and Execution

• Engage line management to define the legislative and regulatory compliance framework and determine current business processes and documents.
• Develop an appropriate audit assessment programme to evaluate the compliance in each functional area.
• Identify best practices together with risks and internal controls already implemented.
• Facilitate the confirmation of compliance checklists per functional area.
• Evaluate the adequacy of controls and the extent of compliance in each functional area.
• Recommend the most appropriate controls (where non-existent), aligned to organisational policies and procedures, and agree the steps to be taken to attain appropriate compliance levels.
• Assist the Head of Risk and Compliance in preparing an annual risk-based internal audit plan.
• Conduct a risk assessment of assigned audit/functional areas within required timelines.
• Participate in the determination of the scope and approach of the audits in conjunction with the Head of Risk and Compliance.
• Conduct audits in accordance with the Annual Audit Plan and Audit Methodology including on-site audits for sites across Africa (including, but not limited to South Africa, Botswana, Zambia, Namibia and Tanzania)
• Conduct audit testing of specified processes to test the adequacy of the design and operational effectiveness of controls.
• Ensure test results are documented on audit working papers.
• Evaluate the test results and make recommendations to correct unsatisfactory conditions.
• Follow up on queries raised by the Head of Risk and Compliance upon reviews of working papers and conclude on audit test results.
• Validate audit issues identified through discussion with management and a review of mitigating controls.

2.2. Follow-up Audit Execution

• Determine line managers’ compliance with recommendations and progress in implementing corrective measures. Physically verify compliance and submit a report.

2.3. Ad Hoc Auditing and Investigation

• Conduct requested ad hoc audits and investigations under the supervision of the Head of Risk and Compliance.

• Record deviations from the established processes.
• Compile findings, root causes, potential effects, recommendations and line mangers commitment (what, when, how) for consideration by the Head of Risk and Compliance.
• Engage line management in discussion about the audit findings and request management responses.

2.5. Systems Improvement

• Advise management on systems and processes requiring improvement.
• Follow up on audit findings to ensure adequacy and timeliness of corrections.
• Advise management on systems and processes requiring improvement.
• Follow up on audit findings to ensure adequacy and timeliness of corrections.
• Raise awareness regarding internal audit and risk management and the importance of a sound control environment within the Group.

• Co-ordination of the audit plan with regional auditors, ensuring adequate coverage across all sites.
• Evaluate information security and associated risk exposures.
• Evaluate regulatory compliance programmes. § Evaluate the Group’s business continuity readiness.
• Perform special audit-related projects as assigned.
• Facilitate enterprise‑wide risk assessments and maintain the Group Risk Register.
• Identify strategic, operational, financial, and compliance risks, and ensure risk owners implement appropriate mitigation measures.
• Work with operations, QHSSE, finance, and HR teams to identify project‑level and site‑level risks.
• Monitor and update risk controls, ensuring alignment with ISO‑based methodologies and organisational requirements.
• Provide training and tools to operational teams on risk identification and reporting.

• Ensure data is captured accurately and regularly onto the information system/schedules to enable access to reliable data and reporting for trend analysis and decision making.
• Share relevant data with management teams to enable reliable business decision making.

• Take ownership and accountability for tasks and activities and demonstrate effective self-management in terms of planning and prioritising, and self-development.
• Follow through to ensure that quality and productivity standards of work are consistently and accurately maintained.
• Inform relevant parties in the event of tasks or deadlines not met, the potential risks thereof and provide appropriate resolution. § Manage colleagues’ expectations and communicate appropriately.
• Demonstrate willingness to help others and “go the extra mile” to meet team targets and objectives.

• Must be a Certified Internal Auditor (CIA) § SAP experience would be advantageous
• Experience in remote operations, mining services, or multi‑site environments is an advantage
• At least 3 years’ experience in self-managed auditing activitie